filtergen 0.11

filtergen takes a high-level langauge and compiles it into packet filtering rules for a variety of packet filters

Developer:	Matthew Kirkwood more software by author →
Price:	0.00
License:	GPL (GNU General Public License)
File size:	26K
Language:
OS:
Rating:	0 /5 (0 votes)
Your vote:
enlarge screenshot

filtergen takes a high-level langauge and compiles it into packet filtering rules for a variety of packet filters. Iptables, ipchains, and ipfilter backends are available.

This tool is for generating packet filtering rules from a fairly high-level description language. It doesn't support all of the whizz-bang features of the latest and greatest packet filters, but supports a decent subset which is sufficient for me.

It currently supports just Linux iptables and ipchains. Cisco IOS has been begun, but is incomplete. Darren Reed's ipfilter may be supported at some stage. It doesn't generate optimal rulesets, and has a few limitations which need to be removed, but is still a useful tool.

Not many large softare projects are written entirely in assembly language these days. It's not difficult to be, and the results can often be more efficient, but it does take longer to implement and bugfix, and is not portable to other systems. It is also harder for
others to understand, update and audit.

Similarly, it seems odd that people continue to write packet filters in the equivalent of assembler, or in inflexible macro languages.

Hence this package -- my intent is that "filter" will be to iptables and shell what a C compiler (but not a 4GL) is to assembly.

What's New in This Release:

fixed non-working example in filter_syntax man page fix 64-bit warning in filter.c netmask calculation add "-F [policy]" flush option better feedback on parse errors
tags

packet filters iptables and filtering rules packet filtering high level

Download filtergen 0.11

http://hairy.beasts.org/filter/filtergen-0.11.tar.gz

Authors software

filtergen 0.11 (by Matthew Kirkwood)
filtergen takes a high-level langauge and compiles it into packet filtering rules for a variety of packet filters

Similar software

filtergen 0.11 (by Matthew Kirkwood)
filtergen takes a high-level langauge and compiles it into packet filtering rules for a variety of packet filters

nf-hipac 0.9.1 (by Michael Bellion and Thomas Heinz)
nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC

iptables 1.3.7 (by Harald Welte)
iptables and netfilter are building blocks of a framework inside the Linux 2.4.x and 2.6.x kernel

hlfl 0.60.1 (by Arnaud Launay)
High Level Firewall Language (hlfl) permits writing firewalling rules using a high level language

PFconf 0.8.1 (by Volker Tanger)
PFconf is a very simple script collection to ease working with "naked" packet filters.

Most ACLs (packet filters) don't work with

Compact Filter 0.3 (by Emmanuel Fleury)
Compact Filter is a network packet filter for Linux

DNS Blacklist Packet Filter 0.6 Beta1 (by Russell Miller)

links2world Firewall 0.4 (by Adrian Pascalau)
links2world Firewall is a very simple tool writen in C, that helps you generate iptables rules for Linux 2.4.x and newer kernels

narc 0.7 (by Shane Chen)
NARC is a free firewalling package for Netfilter/Iptables

NetSPoC 3.0 (by Heinz Knutzen)
NetSPoC is a tool for security managment of large computer networks with different security domains